Delete cached local copy of mandatory profile and non roaming domain user profiles ?

Hi. We are currently looking to deploy some Windows XP workstations on a
2003 Domain for development purposes. We are using a mix of mandatory
profiles and general domain users that have NO roaming or mandatory profile.
We are finding that the XP workstations are storing a local copy of the
mandatory profiles and the gerneral domain user accounts as well.

Can anyone confirm whether Windows should automatically remove Mandatory
profiles when the user logs off, and if so can anyone suggest why a copy of
the profiles are being left behind ?

Similarly can anyone recommend how we can allow users with a basic domain
user account (no roaming or mandatory profile) to logon to our XP
workstations such that their locally created profile is automatically
deleted when they logoff ? i.e. no matter the user type (even domain admin
if possible) we would like to remove any locally stored user profiles.

Thanks,
Alex.

Lanwench
Thu May 01 04:57:27 PDT 2008

Alex <email@microsoft.newsgroups> wrote:
> Hi. We are currently looking to deploy some Windows XP workstations
> on a 2003 Domain for development purposes. We are using a mix of
> mandatory profiles and general domain users that have NO roaming or
> mandatory profile. We are finding that the XP workstations are
> storing a local copy of the mandatory profiles and the gerneral
> domain user accounts as well.

Yep - that's normal.
>
> Can anyone confirm whether Windows should automatically remove
> Mandatory profiles when the user logs off,

Nope.

> and if so can anyone
> suggest why a copy of the profiles are being left behind ?

It's by design, as they say.
>
> Similarly can anyone recommend how we can allow users with a basic
> domain user account (no roaming or mandatory profile) to logon to our
> XP workstations such that their locally created profile is
> automatically deleted when they logoff ? i.e. no matter the user type
> (even domain admin if possible) we would like to remove any locally
> stored user profiles.
> Thanks,
> Alex.

For roaming profiles, this can be done in your group policy settings -
http://support.microsoft.com/kb/274152
For non-roaming, I'm not sure there's a policy option for it. However,
delprof certainly works -
http://windowsitpro.com/articles/print.cfm?articleid=48249

Personally - I always use roaming profiles (and folder redirection,so the
profiles stay tiny) and I also *want* a local copy cached on the machine to
eliminate the delay between a user logging in, and a user getting to work.
Just my $.02 and your environment may well be different.

S
Sat May 03 18:45:47 PDT 2008

Create a computer startup script that deletes the local profiles if they are
of a concern to you. Users won't be able to delete profiles as a part of
logoff process.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

"Alex" <email@microsoft.newsgroups> wrote in message
news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...
> Hi. We are currently looking to deploy some Windows XP workstations on a
> 2003 Domain for development purposes. We are using a mix of mandatory
> profiles and general domain users that have NO roaming or mandatory
> profile. We are finding that the XP workstations are storing a local copy
> of the mandatory profiles and the gerneral domain user accounts as well.
>
> Can anyone confirm whether Windows should automatically remove Mandatory
> profiles when the user logs off, and if so can anyone suggest why a copy
> of the profiles are being left behind ?
>
> Similarly can anyone recommend how we can allow users with a basic domain
> user account (no roaming or mandatory profile) to logon to our XP
> workstations such that their locally created profile is automatically
> deleted when they logoff ? i.e. no matter the user type (even domain admin
> if possible) we would like to remove any locally stored user profiles.
>
> Thanks,
> Alex.
>
>
>

Herb
Sun May 04 10:05:49 PDT 2008


"S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...
> Create a computer startup script that deletes the local profiles if they
> are of a concern to you. Users won't be able to delete profiles as a part
> of logoff process.

One of the fastest methods to (permanently) delete a directory
tree is: "del /s /q PATH"

/s = subdirectory /q = quite (no warnings)

This is VERY dangerous as it will (usually*) delete everything in it
without further warning so get the PATH correct. * Unless files
are locked but at startup that is unlikely.

A "for /d" (directories) loop can get all directories but be careful
not to delete the Default (or other profiles you wish to keep.)

> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> "Alex" <email@microsoft.newsgroups> wrote in message
> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...
>> Hi. We are currently looking to deploy some Windows XP workstations on a
>> 2003 Domain for development purposes. We are using a mix of mandatory
>> profiles and general domain users that have NO roaming or mandatory
>> profile. We are finding that the XP workstations are storing a local copy
>> of the mandatory profiles and the gerneral domain user accounts as well.
>>
>> Can anyone confirm whether Windows should automatically remove Mandatory
>> profiles when the user logs off, and if so can anyone suggest why a copy
>> of the profiles are being left behind ?
>>
>> Similarly can anyone recommend how we can allow users with a basic domain
>> user account (no roaming or mandatory profile) to logon to our XP
>> workstations such that their locally created profile is automatically
>> deleted when they logoff ? i.e. no matter the user type (even domain
>> admin if possible) we would like to remove any locally stored user
>> profiles.
>>
>> Thanks,
>> Alex.
>>
>>
>>
>
>

Lanwench
Sun May 04 10:56:46 PDT 2008

Herb Martin <news@learnquick.com> wrote:
> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
> news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...
>> Create a computer startup script that deletes the local profiles if
>> they are of a concern to you. Users won't be able to delete profiles
>> as a part of logoff process.
>
> One of the fastest methods to (permanently) delete a directory
> tree is: "del /s /q PATH"
>
> /s = subdirectory /q = quite (no warnings)
>
> This is VERY dangerous as it will (usually*) delete everything in it
> without further warning so get the PATH correct. * Unless files
> are locked but at startup that is unlikely.
>
> A "for /d" (directories) loop can get all directories but be careful
> not to delete the Default (or other profiles you wish to keep.)

Hence, using delprof instead would be a very simple alternative :-)
>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>> "Alex" <email@microsoft.newsgroups> wrote in message
>> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...
>>> Hi. We are currently looking to deploy some Windows XP
>>> workstations on a 2003 Domain for development purposes. We are
>>> using a mix of mandatory profiles and general domain users that
>>> have NO roaming or mandatory profile. We are finding that the XP
>>> workstations are storing a local copy of the mandatory profiles and
>>> the gerneral domain user accounts as well. Can anyone confirm whether
>>> Windows should automatically remove
>>> Mandatory profiles when the user logs off, and if so can anyone
>>> suggest why a copy of the profiles are being left behind ?
>>>
>>> Similarly can anyone recommend how we can allow users with a basic
>>> domain user account (no roaming or mandatory profile) to logon to
>>> our XP workstations such that their locally created profile is
>>> automatically deleted when they logoff ? i.e. no matter the user
>>> type (even domain admin if possible) we would like to remove any
>>> locally stored user profiles.
>>>
>>> Thanks,
>>> Alex.

Al
Sun May 04 12:54:39 PDT 2008


"Lanwench [MVP - Exchange]"
<lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:eo7h2ChrIHA.4788@TK2MSFTNGP03.phx.gbl...
> Herb Martin <news@learnquick.com> wrote:
>> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
>> news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...
>>> Create a computer startup script that deletes the local profiles if
>>> they are of a concern to you. Users won't be able to delete profiles
>>> as a part of logoff process.
>>
>> One of the fastest methods to (permanently) delete a directory
>> tree is: "del /s /q PATH"
>>
>> /s = subdirectory /q = quite (no warnings)
>>
>> This is VERY dangerous as it will (usually*) delete everything in it
>> without further warning so get the PATH correct. * Unless files
>> are locked but at startup that is unlikely.
>>
>> A "for /d" (directories) loop can get all directories but be careful
>> not to delete the Default (or other profiles you wish to keep.)
>
> Hence, using delprof instead would be a very simple alternative :-)

That's not the only reason, as references to the profiles would still appear
in the registry once the profile folder was deleted.

/Al

>>
>>> --
>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>>> -= F1 is the key =-
>>>
>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>>
>>> "Alex" <email@microsoft.newsgroups> wrote in message
>>> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...
>>>> Hi. We are currently looking to deploy some Windows XP
>>>> workstations on a 2003 Domain for development purposes. We are
>>>> using a mix of mandatory profiles and general domain users that
>>>> have NO roaming or mandatory profile. We are finding that the XP
>>>> workstations are storing a local copy of the mandatory profiles and
>>>> the gerneral domain user accounts as well. Can anyone confirm whether
>>>> Windows should automatically remove
>>>> Mandatory profiles when the user logs off, and if so can anyone
>>>> suggest why a copy of the profiles are being left behind ?
>>>>
>>>> Similarly can anyone recommend how we can allow users with a basic
>>>> domain user account (no roaming or mandatory profile) to logon to
>>>> our XP workstations such that their locally created profile is
>>>> automatically deleted when they logoff ? i.e. no matter the user
>>>> type (even domain admin if possible) we would like to remove any
>>>> locally stored user profiles.
>>>>
>>>> Thanks,
>>>> Alex.
>
>
>

Lanwench
Sun May 04 12:59:23 PDT 2008

Al Dunbar <AlanDrub@hotmail.com.nospaam> wrote:
> "Lanwench [MVP - Exchange]"
> <lanwench@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:eo7h2ChrIHA.4788@TK2MSFTNGP03.phx.gbl...
>> Herb Martin <news@learnquick.com> wrote:
>>> "S. Pidgorny <MVP>" <slavickp@yahoo.com> wrote in message
>>> news:%23gJ1UiYrIHA.3616@TK2MSFTNGP06.phx.gbl...
>>>> Create a computer startup script that deletes the local profiles if
>>>> they are of a concern to you. Users won't be able to delete
>>>> profiles as a part of logoff process.
>>>
>>> One of the fastest methods to (permanently) delete a directory
>>> tree is: "del /s /q PATH"
>>>
>>> /s = subdirectory /q = quite (no warnings)
>>>
>>> This is VERY dangerous as it will (usually*) delete everything in it
>>> without further warning so get the PATH correct. * Unless files
>>> are locked but at startup that is unlikely.
>>>
>>> A "for /d" (directories) loop can get all directories but be careful
>>> not to delete the Default (or other profiles you wish to keep.)
>>
>> Hence, using delprof instead would be a very simple alternative :-)
>
> That's not the only reason, as references to the profiles would still
> appear in the registry once the profile folder was deleted.
>
> /Al

Yep, that too.

>
>>>
>>>> --
>>>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>>>> -= F1 is the key =-
>>>>
>>>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>>>
>>>> "Alex" <email@microsoft.newsgroups> wrote in message
>>>> news:%23WdbaD3qIHA.1436@TK2MSFTNGP05.phx.gbl...
>>>>> Hi. We are currently looking to deploy some Windows XP
>>>>> workstations on a 2003 Domain for development purposes. We are
>>>>> using a mix of mandatory profiles and general domain users that
>>>>> have NO roaming or mandatory profile. We are finding that the XP
>>>>> workstations are storing a local copy of the mandatory profiles
>>>>> and the gerneral domain user accounts as well. Can anyone confirm
>>>>> whether Windows should automatically remove
>>>>> Mandatory profiles when the user logs off, and if so can anyone
>>>>> suggest why a copy of the profiles are being left behind ?
>>>>>
>>>>> Similarly can anyone recommend how we can allow users with a basic
>>>>> domain user account (no roaming or mandatory profile) to logon to
>>>>> our XP workstations such that their locally created profile is
>>>>> automatically deleted when they logoff ? i.e. no matter the user
>>>>> type (even domain admin if possible) we would like to remove any
>>>>> locally stored user profiles.
>>>>>
>>>>> Thanks,
>>>>> Alex.